Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ed2de4cf-740a-331f-a504-905188603ad1.roa
File:                     ed2de4cf-740a-331f-a504-905188603ad1.roa (raw, json)
Hash identifier:          /rsnW5G4+1NMpL8plS8X4sUkDfYZzAxleyo0jyYl0Z8=
Subject key identifier:   9F:CB:E6:FB:9A:D2:2E:A7:A3:AB:2A:39:9A:A0:A6:8E:C8:66:F1:C2
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584558C841E4B0D461C78A9C4CA0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ed2de4cf-740a-331f-a504-905188603ad1.roa
Signing time:             Wed 27 Mar 2024 13:00:35 +0000
ROA not before:           Wed 27 Mar 2024 13:00:35 +0000
ROA not after:            Tue 25 Jun 2024 13:00:35 +0000
asID:                     397630
IP address blocks:        130.254.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:58:c8:41:e4:b0:d4:61:c7:8a:9c:4c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 27 13:00:35 2024 GMT
            Not After : Jun 25 13:00:35 2024 GMT
        Subject: CN=5201834e-b5ce-40e0-a350-f3cd964d014e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:51:b8:78:5f:31:f8:f4:65:26:95:97:e0:7d:
                    2d:29:7c:83:0e:d7:d5:4c:4a:7e:1c:4f:12:af:c3:
                    3e:9e:c5:85:a7:85:c4:42:6c:4e:d4:89:08:a3:ab:
                    bd:d7:c3:c6:11:0a:78:05:46:b5:84:5a:0f:fd:12:
                    f7:19:e9:f9:23:c2:c9:6e:b1:82:13:d1:6c:a0:77:
                    dc:9c:40:b9:c1:19:22:19:98:24:4f:28:3b:07:3d:
                    b8:4f:d2:64:cb:da:70:54:8e:d2:90:b3:85:30:47:
                    a2:14:37:aa:37:b7:ba:d0:c9:2c:7c:01:61:d4:7c:
                    50:b0:de:41:b0:57:8d:96:3c:12:45:e5:7c:1f:4b:
                    25:89:06:8a:a6:0a:22:90:0f:79:75:98:89:96:a7:
                    67:a7:9d:e8:89:f6:d3:f4:34:fc:17:56:1f:b6:ab:
                    26:e0:4b:d4:8b:38:3c:d6:c9:87:e7:49:74:cb:47:
                    00:1a:d7:b5:b0:7f:58:21:64:dc:82:33:9c:80:50:
                    c8:51:b1:41:d5:e7:6d:f1:22:5b:77:84:98:10:8c:
                    ea:6d:04:dc:82:94:35:99:da:a9:b2:ce:39:5b:69:
                    6e:7e:10:eb:f9:15:0f:e2:ed:9f:d9:3c:71:16:8d:
                    34:d0:6a:4c:0f:5e:6e:e1:b2:63:78:69:22:d8:40:
                    8f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CB:E6:FB:9A:D2:2E:A7:A3:AB:2A:39:9A:A0:A6:8E:C8:66:F1:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ed2de4cf-740a-331f-a504-905188603ad1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:97:b6:9d:8d:b7:e7:29:81:fa:2d:8f:11:a4:52:a9:d2:49:
         9a:7a:0d:d2:cc:e1:5b:85:e6:1d:d9:91:f0:9c:92:d2:4a:e6:
         ee:c4:ea:c8:a9:d4:7d:9c:fb:f3:45:5b:84:4d:61:d7:e3:36:
         a9:ff:ee:3e:11:e4:0a:3e:e4:db:dc:41:55:a0:c4:73:f1:42:
         66:23:1c:74:00:b7:b9:0e:d1:91:a5:7d:da:09:42:99:01:38:
         d7:78:4d:3b:dc:b3:85:72:ba:4a:ea:5c:88:c4:ad:86:d9:ad:
         18:8c:56:db:4c:53:4d:fc:27:59:31:89:aa:76:1f:52:0c:fb:
         5e:cd:91:51:9e:af:0c:0e:d8:5e:a4:02:9b:6e:39:4f:14:d1:
         81:75:7f:7e:a1:11:e9:a5:96:95:dd:6f:03:cd:c4:22:9d:55:
         ef:55:b8:a0:11:a0:9a:c2:f8:1d:f1:40:0f:57:5b:07:f4:e2:
         6d:a4:4a:e8:30:c6:c7:6a:d7:5f:7b:19:a0:75:22:6d:a9:fc:
         c9:60:b6:d1:a7:26:ae:ee:9b:4c:88:e2:db:15:c7:1a:36:90:
         ee:05:d7:10:5b:2a:b7:71:52:1f:90:78:1a:0b:03:e6:02:d5:
         b3:9a:bc:fd:6f:f4:15:e4:db:2d:bc:69:50:bf:75:59:1e:89:
         aa:f3:ce:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:24:49 2024 by rpki-client on console-ams.rpki-client.org